Use env variables from existing secret in migration job

When DATABASE_URL is set in an existing secret instead of env.secret the migration job will always fail. This MR fixes this.